What is GHSA-hr36-79f7-75x7?

GHSA-hr36-79f7-75x7 is a security advisory published by GitHub Security Advisories with Critical severity. Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

Which CVE IDs does GHSA-hr36-79f7-75x7 cover?

GHSA-hr36-79f7-75x7 covers the following CVE IDs: CVE-2026-51807. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hr36-79f7-75x7?

GHSA-hr36-79f7-75x7 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-hr36-79f7-75x7CriticalCVSS 9.8

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute...

Vendor

GitHub Security Advisories

Published

July 15, 2026

Last Modified

July 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-51807 →

📋 Description

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the j2k_precinct_subband::parse_packet_header() in source/core/coding/coding_units.cpp

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-51807
https://github.com/osamu620/OpenHTJ2K/commit/0778b93
https://github.com/osamu620/OpenHTJ2K/blob/main/CHANGELOG
https://github.com/osamu620/OpenHTJ2K/releases
https://github.com/advisories/GHSA-hr36-79f7-75x7